CLI (Command Line Interface)
179
NXA-ENET24 - Software Management Guide
Secure Shell Commands (Cont.)
Command Function
copy tftp public-key Copies the user’s public key from a TFTP server to the switch
delete public-key
This command deletes the
specified user’s public
key.
Syntax:
delete public-key username [dsa | rsa]
• username – Name of an SSH user.
Range: 1-8 characters
• dsa – DSA public key type.
• rsa – RSA public key type.
Default Setting: Deletes both the DSA and RSA key.
Command Mode: Privileged Exec
Example:
Console#delete public-key admin dsa
Console#
ip ssh crypto host-key
generate
This command generates
the host key pair (i.e., pub-
lic and private).
Syntax:
ip ssh crypto host-key generate [dsa | rsa]
• dsa – DSA (Version 2) key type.
• rsa – RSA (Version 1) key type.
Default Setting: Generates both the DSA and RSA key pairs.
Command Mode: Privileged Exec
Command Usage:
• This command stores the host key pair in memory (i.e., RAM). Use the ip ssh
save host-key command to save the host key pair to flash memory.
• Some SSH client programs automatically add the public key to the known hosts
file as part of the configuration process. Otherwise, you must manually create a
known hosts file and place the host public key in it.
• The SSH server uses this host key to negotiate a session key and encryption
method with the client trying to connect to it.
Example:
Console#ip ssh crypto host-key generate dsa
Console#
ip ssh crypto zeroize
This command clears the
host key from memory (i.e.
RAM).
Syntax:
ip ssh crypto zeroize [dsa | rsa]
• dsa – DSA key type.
• rsa – RSA key type.
Default Setting: Clears both the DSA and RSA key.
Command Mode: Privileged Exec
Command Usage:
• This command clears the host key from volatile memory (RAM). Use the no ip
ssh save host-key command to clear the host key from flash memory.
• The SSH server must be disabled before you can execute this command.
Example:
Console#ip ssh crypto zeroize dsa
Console#
ip ssh save host-key
This command saves host
key from RAM to flash
memory.
Syntax:
ip ssh save host-key [dsa | rsa]
• dsa – DSA key type.
• rsa – RSA key type.
Default Setting: Saves both the DSA and RSA key.
Command Mode: Privileged Exec
Example:
Console#ip ssh save host-key dsa
Console#